fix(wake): #944 path becomes a hard-locator arm — detector-shape actionable entries can now pass the §2.1 gate + version 0.6.14

The _has_hard_locator gate tested only repo+issue / 40-hex sha / file — the forge locator vocabulary. detector.sh (A1) builds board_file locators as kind/id/observed_hash + path (+ snapshot_sha/_ts when attested, #940): zero keys in common, so a class=actionable board_file entry could NEVER pass and every heartbeat-planning delta dead-lettered (live seqs 63/68, dragon-lin, 2026-07-30). Latent since #920; the #920 harness pinned the detector pilot shape as its malformed example, ratifying the gap. Fix: `path` becomes a hard-locator arm — and ONLY path. It carries the same one-call re-verify precision as `file` (re-read <path>; upgrades to git show <snapshot_sha>:<path> when snapshot-attested). Deliberate NON-arms: observed_hash (content hash, not an address) and bare path-less snapshot_sha (would widen the gate past the board_file vocabulary — review-adopted criterion). The file-level HARD LOCATORS doc block now names all four arms (wake-judge R2(a): shipping the fix while leaving doc-vs-producer drift in the same file would re-seed the defect class). Quarantine is a render-time filter (entries never leave pending.jsonl; dead-letter.jsonl is ledger + alarm-dedup only), so existing UNCONSUMED dead-letters re-deliver automatically on the first post-upgrade drain. Consumed-past dead-letters are not requeued. Tests: Q11 positive control renders the live seq-68 entry VERBATIM as CLAIM@seq (real detector emission, not a hand-built dict); negative controls assert address-free and bare path-less snapshot_sha siblings still quarantine — the snapshot_sha control at all THREE lengths the detector's attestation validation ^[0-9a-f]{7,64}$ admits (7-char abbreviation, 40-hex, 64-char sha-256), so it distinguishes "no arm" from "arm present but length-gated" (review finding E1). Q1/Q6–Q9 fixtures moved off the now-valid path-bearing shape. Q2's ENUM-B is ADDRESS-FREE (wake-judge F1): with `path` an arm, path-bearing reconciled fixtures no longer exercise the exemption at the gate — mutation test (exemption disabled) now dies on the gate-level assertion again, not merely tier labels. RED at base: exactly the 8 Q11 assertions fail; Q1–Q10 pass under both digests. Doc follow-up: #948 amends CONVERGED-DESIGN.md §2.1 (add `path`; state the operative test as "one targeted call, never a search") — sequenced after the reseed as a live delivery test of the fixed gate. Closes #944 Co-Authored-By: Claude Fable 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NsKce8iZuSuRnu3gVMCBKB Written-by: pepper (sb-it-1-dt)
2026-07-30 08:45:34 -05:00
3 changed files with 17 additions and 7 deletions
@@ -25,8 +25,8 @@
 #     sufficiency NEVER exempts a consequential action from its live gate.
 #
 # HARD LOCATORS (§2.1): every actionable claim MUST carry a precise locator
-# (repo + issue#, a 40-char SHA, or file:anchor) so re-verification is ONE
-# targeted call. A missing locator = malformed ACTIONABLE entry = FAIL-LOUD.
+# (repo + issue#, a 40-char SHA, file:anchor, or path — #944) so re-verification
+# is ONE targeted call. A missing locator = malformed ACTIONABLE entry = FAIL-LOUD.
 #
 # #920 (per-entry quarantine — fail-loud WITHOUT head-of-line blocking): a
 # render-refused entry (actionable-tier, no hard locator) is QUARANTINED — durably
@@ -341,7 +341,12 @@
 #              as CLAIM@seq — and Q1/Q6-Q9 fixtures moved off the now-valid
 #              path-bearing shape onto genuinely address-free shapes,
 #              amending the #920-era ruling that had pinned the live pilot's
-#              own locator shape as the malformed example).
+#              own locator shape as the malformed example). Doc follow-up:
+#              #948 amends CONVERGED-DESIGN.md §2.1 to add `path` to the
+#              hard-locator enumeration and to state the operative test as
+#              "one targeted call, never a search" (NOT "pins the observed
+#              state") — sequenced AFTER the reseed so the edit itself is a
+#              live delivery test of the fixed gate.
 component=wake
 version=0.6.14

@@ -14,9 +14,10 @@
 #          {kind,id,path,observed_hash} as the malformed case — ratifying a gate
 #          the detector's own locators could never satisfy (every actionable
 #          heartbeat-planning delta dead-lettered; live seqs 63/68). #944 amends
-#          that ruling: `path` and 40-hex `snapshot_sha` are now hard-locator
-#          arms (see Q11), so the quarantine fixtures here and in Q6-Q9 use
-#          genuinely ADDRESS-FREE shapes instead.]
+#          that ruling: `path` is now a hard-locator arm — and ONLY path;
+#          bare snapshot_sha is deliberately NOT an arm, Q11(d) asserts it
+#          still quarantines — so the quarantine fixtures here and in Q6-Q9
+#          use genuinely ADDRESS-FREE shapes instead.]
 #   Q2 (b) ENUM-AS-ORIENTATION: a reconciler enumeration (locators.reconciled==
 #          true) renders as an ORIENTATION-tier pointer and does NOT exit-4 / is
 #          NOT quarantined. RED baseline: reconciled `actionable` + soft locators
@@ -167,7 +168,11 @@ echo "== Q2 (b): reconciler enumeration (reconciled:true) renders ORIENTATION-ti
  unset WAKE_AGENT
  f="$TMP_ROOT/q2.jsonl"
  # A reconciler enumeration: store class actionable (unchanged) + reconciled marker.
-  printf '%s\n' '{"observed_seq":5,"class":"actionable","locators":{"kind":"repo","id":"ENUM-B","path":"BOARD.md","observed_hash":"cafe1234","reconciled":true},"emit_ts":1}' >"$f"
+  # ADDRESS-FREE on purpose (#944 F1): no path/file/sha/repo+issue — the reconciled
+  # exemption must be the ONLY thing keeping this entry out of quarantine, so the
+  # exemption is proven load-bearing AT THE GATE (mutation-killable), not merely at
+  # the tier label. (Q3's ENUM-C* stay path-bearing: reconciled + valid-locator mix.)
+  printf '%s\n' '{"observed_seq":5,"class":"actionable","locators":{"kind":"repo","id":"ENUM-B","observed_hash":"cafe1234","reconciled":true},"emit_ts":1}' >"$f"
  err="$TMP_ROOT/q2.err"
  out="$("$DIGEST" render --from-file "$f" --agent default 2>"$err")"
  rc=$?